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Method and apparatus for data transmission between an electromedical implant 
and an external apparatus 



The invention concerns a method and an apparatus for data transmission between 
an electromedical implant and an external apparatus, as set forth in the classifying 
portion of claim 1 and the classifying portion of claim 1 3 respectively. 

In order to monitor operation of an electromedical implant or the state of the 
patient in question, it is necessary for such implants to be equipped with telemetry 
devices. They make it possible for data which is available in the implant and which 
reflects the state of the patient and the implant to be read out into an external 
apparatus in a contact-free procedure. Such electromedical implants are for 
example cardiac pacemakers, defibrillators, cardioverters or other electronically 
actuated or controlled implants. 



A 



Thus US patent specification No 5 720 770 discloses for example a method of 
data transmission between an electromedical implant having a first transrnitter/- 
receiver unit and an associated external apparatus having a second transmitter/- 
receiver unit, wherein data transmission begins with a triggering signal which is 
sent from the transmitter/receiver unit of the external apparatus to the transmitter/- 
receiver unit of the implant. That triggering signal is sent at predeterminable first 

y 

intervals of time, in nprmai operation of the implant, in such a bidirectional radio 

// 

path as is used here, the receivers at both ends of the communication path are 
always switched on in order to detect when the other partner in the communica- 
tion takes up a communication. 

The energy resources within an electromedical implant of that kind however are 
severely limited so that it would be desirable to achieve the lowest possible level 
of energy consumption in order to increase the operating life. 

For that purpose, US No 5 720 770 proposes that the processors which control 
the telemetry device of the implant are powered down to a minimum level of 
operation during the inactive times of the telemetry device and that they are 
"woken up" upon the receipt of a triggering signal from the external apparatus and 
go back up into the normal mode of operation in which more energy is consumed. 

That method however still suffers from the disadvantage that the receiver of the 
implant must be continuously in operation in order to detect the triggering signal 
from the external apparatus. 

Therefore the object of the invention is to provide a method of the general kind set 
forth, which permits energy-saving operation of the implant. 

Based on a method as set forth in the classifying portion of claim 1 , that object is 
attained by the features recited in the characterizing portion of claim 1 . 



The invention includes the technical teaching that a particularly energy-saving 
mode of operation of the implant is achieved if the triggering signal is always 
emitted by the first implanted transmitter/receiver unit, that is to say the trans- 
mitter/receiver unit of the implant, wherein at least reception readiness of the first 
transmitter/receiver unit is maintained for a second interval of time after emission 
of the triggering signal. Reception readiness of the f irst transmitter/receiver unit of 
the implant is maintained only for a certain period of time which is shorter than the 
period of time up to the next triggering signal so that at least the receiver portion 
and preferably also the transmitter portion of the first transmitter/receiver unit is 
switched off before the next triggering signal and therefore does not consume any 
energy. Depending on how the ratio between reception and rest phases turns out, 
it is possible to achieve a considerable saving in energy in that way. 

In that respect the energy saving can be achieved by the method according to the 
invention, that is to say the communication protocol according to the invention, 
irrespective of the specific design structure of the receiver and transmitter. 

In particularly simple variants the triggering signal is formed by or contains a first 
data set to be transmitted. 

In further advantageous embodiments of the method according to the invention the 
second external transmitter/receiver unit, in response to a transmission of data by 
the first implanted transmitter/receiver unit, sends a first acknowledgment to the 
first transmitter/receiver unit. In this case the first acknowledgment contains at 
least a first item of control information for controlling the reception readiness 
condition of the first transmitter/receiver unit. In that way it is possible to control 
the reception readiness of the first transmitter/receiver unit, in dependence on 
whether a transmission is also to be effected by the second transmitter/receiver 
unit. It will be appreciated that in this respect reception readiness, that is to say 
the second time interval, must last at least so long that the first acknowledgment 
is still received by the first transmitter/receiver unit or the second time interval is 



determined at least on the basis of the time in which such an acknowledgment is 
to be expected. 

It is further possible that the reception phase is varied by the first acknowledgment 
or a transmission following same of the second transmitter/receiver unit. Thus the 
reception phase, that is to say the second time interval, can be curtailed, if, in the 
context of the current transmission cycle, no further transmission of the second 
transmitter/receiver unit is to be effected and reception readiness can thus be 
terminated promptly or at once. It is however also possible to extend the second 
time interval if at least one further transmission is also to follow. 

Preferably the first acknowledgment is also formed by or contains a second data 
set to be transmitted. 

In preferred variants of the method the external apparatus implements a first 
plausibility check in respect of the data transmitted by the first transmitter/receiver 
unit. In this case certain check bits of the transmitted data sets can be checked 
on the basis of certain criteria. Then, depending on the plausibility of the trans- 
mitted data, the first acknowledgment contains a second item of control informa- 
tion for control of the first transmitter/receiver unit. In the event of lack of plausi- 
bility of the transmitted data, the second item of control information contains a 
first control signal for triggering a renewed transmission of data by the first trans- 
mitter/receiver unit. That advantageously achieves an increase in transmission 
security as probably defectively transmitted data are requested again. 

Preferably, at the first control signal the first transmitter/receiver unit implements 
a renewed transmission of data if a number of renewed transmissions, which is 
sufficiently low to avoid overloading the energy supply of the implant, is not 
exceeded. In that respect the number of renewed transmissions can be predeter- 
mined, in particular by means of a suitable control signal from the external appara- 
tus. Alternatively or in addition it can be established in dependence on the state 
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of charge of the energy storage means of the implant. 

In preferred developments, a further increase in the level of probability of data 
authenticity is achieved in that, to check the transmission of data by the implant, 
upon the existence of plausibility of the transmitted data, the second transmitter/- 
receiver unit sends back to the first transmitter/receiver unit at least a part of the 
transmitted data. If they are not in conformity with the data sent, there is a high 
degree of probability that an error has also already occurred in transmission to the 
second transmitter/receiver unit. 

Preferably, after checking of the transmission of the data by way of the first 
transmitter/receiver unit, the implant sends a second acknowledgment to the 
second transmitter/receiver unit. When successful transmission is established, that 
second acknowledgment contains a first signature representing the validity of the 
transmission. Following that sending, the implant closes down the reception 
readiness of the first transmitter/receiver unit and preferably also the transmission 
readiness. The renewed output of a triggering signal then marks the expiry of the 
rest phase which is thereby optimized in respect of its duration. 

As a further preferred feature, for further enhancing probability of data authentici- 
ty, the external apparatus implements a second plausibility check in respect of the 
second acknowledgment. When a lack of plausibility in respect of the second 
acknowledgment is established, a renewed interrogation on the part of the implant 
is effected after expiry of a further time interval after transmission of the second 
acknowledgment. In that case, after expiry of the further time interval, the implant 
takes up the condition of reception and transmission readiness of the first trans- 
mitter/receiver unit for a renewed further time interval which is sufficient to receive 
and answer an inquiry from the external apparatus. Furthermore, in that case, the 
inquiry is answered by renewed sending of the second acknowledgment and/or the 
data which were last sent. That ensures that correspondingly brief temporary 
disturbances have relatively little influence. In addition, on the basis of a compari- 



son of the second acknowledgment which is then present in duplicate in the 
externa, apparatus and/or the data which were last sent, it is possible to dec.de 
whether the data set can be assumed to be valid. 

Preferably in this case also when defective transmission of the data is found, 
renewed transmission of data is effected by the first transmitter/receiver un.t .f a 
number of renewed transmissions, which is sufficiently low to avoid overloads 
the energy supply of the implant, is not exceeded. 

In advantageous variants of the method according to the invention, renewed 
transmission is effected after the expiry of a waiting time interval, in wh.ch case 
the length of the waiting time interval preferably increases in the case of multiple 
repeated transmission. It is possible in that way to compensate for systemat.c 
errors, for example the temporary presence of an item of equipment which .s 
causing interference and which makes error-free transmission impossible. 

Preferably, after renewed transmission of data by the first transmitter/receiver unit, 
the steps in the method are implemented again, beginning with the plausibility 
check, in order in this case also to increase the probability of data authenticity. 

In a further development stage, it is also possible to save energy in the external 
terminal apparatus. For that purpose, in advantageous developments of the 
method according to the invention, the second transmitter/receiver unit is sub- 
stantially permanently ready to receive in the initial condition until the first data 
exchange with the implant. At least during the first data exchange the trans- 
mission or reception readiness of the second transmitter/receiver unit is reduced to 
a periodic transmission or reception readiness interval, in which case the second 
transmitter/receiver unit is synchronized with the first transmitter/receiver unit in 
such a way that the transmission or reception readiness intervals of the first and 
second transmitter/receiver units at least overlap. In this case also the switch-off 
times of the second transmitter/receiver unit make it possible to achieve a conside- 



rable energy saving which is advantageous precisely in relation to external appara- 
tuses which are designed in the form of portable patient equipment. 

It is preferably provided in that respect that, in the event of non-receipt of trans- 
missions from the first transmitter/receiver unit, at the second transmitter/receiver 
unit, over a predetermined number of transmission or reception readiness intervals 
of the second transmitter/receiver unit, the transmission or reception readiness 
interval of the second transmitter/receiver unit is prolonged in order to catch any 
divergence drift of synchronicity. 

In advantageous embodiments of the method according to the invention at least 
the rest phase can be varied during operation by a second item of control informa- 
tion being sent by the second transmitter/receiver unit to the first transmitter/recei- 
ver unit which is ready to receive. It is possible in that way for example to take 
into consideration a change in the patient condition, insofar as upon an improve- 
ment the transmission intervals are prolonged while in the event of a worsening of 
the patient condition they are curtailed. 

In that respect transmission frequency is controllable either later in the case of 
bidirectional transmission by a service center which is connected to the external 
apparatus, or it can be set beforehand by the doctor with the help of the program- 
mer. In that way monitoring can be accurately matched to the condition of the 
patient. 

In further advantageous embodiments the rest phase is varied in dependence on 
the operating parameters of the implant. Those operating parameters also accura- 
tely reflect the condition of the patient so that transmission frequency of the 
implant is automatically adapted to the patient condition. 

Preferably, when appropriate implant operating parameters prevail, the first trans- 
mitter/receiver unit sends an emergency triggering signal to the second trans- 



mitter/receiver unit, for triggering an alarm signal. In that way it is then possible 
to initiate suitable countermeasures for example by an emergency center which is 
connected to the external apparatus. 

Other advantageous developments of the invention are characterized in the appen- 
dant claims and are described in greater detail hereinafter together with the des- 
cription of the preferred embodiment of the invention, with reference to the accom- 
panying drawings in which: 

Figure 1 shows a block circuit diagram of a preferred embodiment of an 
apparatus for carrying out the method according to the invention. 

Figure 2 shows a flow chart of a method, 

Figure 3 shows a detail from Figure 2, 

Figure 4 shows a block circuit diagram of a variant of a patient monitoring 
system using the present invention, 

Figure 5 shows a block circuit diagram of a variant of a patient monitoring 
and after-care system using the present invention, 

Figure 6 shows a block circuit diagram of a further variant of a patient moni- 
toring and after-care system using the present invention, 

Figure 7 shows a block circuit diagram of a telemetry device of an electrome- 
dical implant using the present invention, 



Figure 8 



shows the transmitter/receiver unit of a variant of the embodiment 
shown in Figure 1, 



Flgure 9 shows a circuit diagram of a transmitter c, a variant of the embodi- 

ment of Figure 1 , and 

Figure 10 snows a o,o= k circuit diagram of a further preferred embodiment of 
an apparatus according to the invention. 



4. 



Mobile p ortion 3 

,„ ,h,s arrangement the mobiie portion 3 has a contro, device 5 and a f irs, interface 
ev e mobiie radio device 7. a second interface device 8. a man— 
Interface 9 and a third interface device 1 6 which are respectiveiy connec ed to the 
Ho, device , The firs, interface ^^^^Z 

power supply portion 10. 

The firs, interface device 6 comprises a telemetry transmitter/receiver unit so that 
b 2 i cr,ion 3 can -e contact with the impiant by way o, a bidirec,,ona 
emetry section. The receiver and the transmitter of the interface dev,ce 6 

, ■ ,r The two circuit portions form a functional unit. The rece.ver 
integrated ,n an IC. The two P ^ ^ 

and the transmitter preferably operate ,n the UHF range 

baud rate stages are 4. 8. 1 6 and 32 Kbi„s. It is however 

particular for the implan, energysaving fluencies ,n the VHP- or LP range. 

The mobile radio device 7 can transmit data which are read ou, o, the Implant for 
Ilple by way o, the first interface device 6 ,n the form of SMS-messages and 
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can be called by a service center serving as a monitoring arrangement or a central 
storage arrangement. 

A connection can be made between the mobile portion 3 and the base station 4 by 
way of the second interface device 8. It is in the form of an infrared interface 
(IrDA). It operates bidirectional and can transmit data in the half-duplex mode. 

The man-machine interface 9 makes it possible for the mobile portion 3 to be 

operated by a user. 

The third interface device 1 6 is used for receiving external data or for service. It 
is also in the form of an IrDA interface. 

The serial interface for both IrDA interface devices 8 and 16 and the interface to 
the mobile radio device 7 are disposed in parallel so that there is only ever one unit 
which can be operated. The IrDA interfaces 8 and 16 are connected in parallel. 
Both interfaces are continuously ready for reception so that an external request can 
be serviced at any time. The software then only has to establish at which IrDA 
interface the reception request occurs. 

The power supply for the mobile portion 3 is implemented by means of Li-ion 
batteries. They can supply the mobile portion 3 in the fully charged-up state for at 
least 20 hours (standby time + 1 6 SMS-transmissions). The dimensioning of the 
batteries applies in regard to the end of the operating life. The arrangement 
therefore has a 1000 mAh Li-ion battery. 

Mohilft portion 3: modular embodiment 

In a further embodiment which is not specifically illustrated the telemetry unit 6 for 
communication with the implant 1 including a transmitting/receiving antenna and 
an electronic actuating system for telemetry as well as an interface device 17 is 
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disposed in a separate module. That separate module has an interface device 17 
for electrical and possibly also mechanical connection to a mobile telephone. 

The separate module can be fitted for example instead of the battery pack into the 
mobile telephone, thus affording a mechanically sturdy unit comprising the mobile 
telephone and a separate housing which possibly projects to an immaterial degree 
beyond the previous external contour of the mobile telephone. 

In this variant the separate module has a battery compartment into which can be 
fitted the original battery pack of the mobile telephone or however another suitable 
battery or a suitable battery pack. That battery then serves for the power supply 
for the entire system consisting of the mobile telephone and the separate module 
and can be charged by way of the standard charging connections on the mobile 
telephone. 

In the case of this variant, there are three basic possible options in regard to data 
connection between the separate module and the mobile telephone: 

1 by way of the external electromechanical plug of the (usually serial) inter- 
face provided on the mobile telephone, 

2 by way of an electromechanical plug of the (serial) interface provided on the 
mobile telephone, which plug is additionally to be integrated in the battery 
compartment of the mobile telephone, or 

3 by way of the IrDA interface provided on the mobile telephone. 

In the case of the first and third variants, there is an optical or mechanical connec- 
tion between the separate module and the interface integrated in the mobile 
telephone, that is to say the separate module or a fixed extension thereof covers 
over the interface of the mobile telephone and at that location includes a suitable 
plug connection or extends into the proximity of the interface of the mobile tele- 
phone and includes at that end an infrared interface. Those solutions involve 
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special software for the mobile telephone, which permits control which is initiated 
by way of that interface. 

For integration of the plug in the battery compartment the second variant additio- 
nally requires a mechanical and electrical modification to the mobile telephone. A 
suitable connection of that plug not only to the serial interface but also to other 
parts of the electronics of the mobile telephone mean that it is possible to provide 
for direct control of the mobile telephone by the telemetry unit. 

In both cases the known normal function of the mobile telephone is retained. 
Priority control for telemetry transmissions can possibly be provided. Preferably, 
the electronics of the mobile telephone are automatically set in operation when 
required by the telemetry unit which is permanently in a state of reception readi- 
ness or which is selectively time-controlled (event control). 

in a further variant the separate module can be integrated on a SIM-card. That 
SIM-module is fitted in place of the standard SIM-card into the SIM-card tray and 
uses the interface provided for same as the standard. 

Possibly for example the transmitting/receiving antenna and the electronic actua- 
ting system for telemetry can be so designed that, when the SIM-module is inser- 
ted, they are disposed outside the housing of the mobile telephone. 

In this variant, a buzzer which is usual in mobile telephones can be actuated for 
acoustic display of the various patient alarm functions. The optical display which 
is provided in any case on mobile telephones can be used for the optical display, 
in all modular variants. 

Mobile portion 3: Man-mach ine interface 

Provided on the mobile portion 3 are a LED and a buzzer for optical and acoustic 
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display of functions and operating states, as well as some switches for manually 
triggering functions. 

A flashing light-emitting diode indicates the low battery state as soon as the 
battery charge has fallen to 10%. The mobile portion 3 then still has a minimum 
running reserve of about 2 hours. As the mobile portion 3 is not always visible to 
the patient, the buzzer, by a short alarm, also indicates the occurrence of the low 
battery state. The buzzer must operate at a frequency of about 2 kHz or below 
and must be suitably loud so that even patients of limited perception can be certain 
to hear the alarm sound. The buzzer should trigger an alarm again approximately 
every 5 minutes to remind the patient to charge up the battery. 

There is provided a recessed on/off switch which cannot be unintentionally opera- 
ted. The switch position is labeled so that it is possible to see whether the mobile 
portion 3 is switched on. That switch is necessary as the mobile portion 3 with 
the mobile radio device 7 must be switched off in some areas in which it is to be 
found, for example in an in-flight situation and in certain areas of hospitals. 

There may be provided a key for sending a short message for testing the SMS- 
channel to the service center. The mobile portion 3 shows by means of a flashing 
LED that such a test has been started. The service center recognizes the received 
short message as being a test and sends an acknowledgment to the mobile portion 
3. Flashing of the LED is thereupon terminated again, whereby the patient can see 
that both the outgoing and also the incoming connection to the service center are 
operable. 

For diagnostic purposes, there can be provided a key by means of which the 
patient can trigger data transmissions to the service center. If the patient suffers 
from complaints or troubles of any kind which possibly cannot be in any way 
detected as such for the implant, that key can be pressed. Thereupon a data set 
is transmitted, which besides the items of information which are to be transmitted 
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as a routine matter, includes the time of triggering and acquisition of the associa- 
ted data by the implant. The transmitted short message also informs the service 
center that this is a patient-triggered data transmission which is possibly to be 
dealt with separately. 

For acute emergency cases, it is possible to use a patient alarm key which is also 
protected from unintentional incorrect operation. That emergency key can be 
arranged in recessed relationship for that purpose and can be additionally protected 
by a cover which first has to be opened in order to trigger off the patient alarm. 
The protection against incorrect operation can also be in the form of a time lock in 
the software, which assumes the key function to be valid only if the key is de- 
pressed for a relatively long period of time (for example more than 3 seconds). A 
successfully triggered patient alarm is acknowledged acoustically by the buzzer. 
Thereafter the key can be released again, in addition a light-emitting diode is 
continuously switched on for 10 seconds and then lights up once again for 2 
seconds each minute as a reminder that a patient alarm has been triggered. The 
buzzer is always actuated simultaneously with the light-emitting diode so that even 
patients of limited perception can perceive this acknowledgment from the external 
apparatus. 

A patient alarm is immediately transmitted to the service center by way of SMS. 
It is canceled only when the service center acknowledges the patient alarm - also 
by way of SMS - , thereby ensuring that the alarm has reached the service center. 
Acknowledgment of the alarm by the service center is also displayed by a light- 
emitting diode and a buzzer on the mobile portion 3. Those measures contribute 
on the one hand to calming the patient, while on the other hand ensuring that, 
upon triggering of a patient alarm in a dangerous condition for the patient, further 
measures do not fail to be implemented if the patient alarm could not be trans- 
mitted successfully. 

If a patient alarm which has not been acknowledged is to be canceled, the mobile 
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portion 3 has to be switched off. After the restart the mobile portion is in the 
normal state again. The mobile portion automatically signals back to the service 
center by way of SMS. In the service center, it can then be recognized that the 
external apparatus was reset and the patient alarm canceled. 

Successful implementation of a patient alarm situation has a higher priority in 
comparison with the low battery display. The low battery display is only imple- 
mented again when the service center has acknowledged the patient alarm. The 
mobile portion 3 is to be switched off if disturbance to the surrounding area by the 
buzzer is to be prevented. 

Mobile portion 3: P «ta encryption 

Only one processor which performs both the tasks of the central unit and also 
those of the communication unit is used as the control unit 5 for the mobile portion 
3. The software can be downloaded by way of the IrDA interface 1 6 into a flash- 
ROM. The memory capacity of the internal flash-ROM is 1 28 KBytes, that of the 
integrated EEPROM is 4 KBytes and that of the static external SRAM is 64 KBytes. 
The program memory size is thus limited to the capacity of the installed flash-ROM 
and cannot be expanded (Harvard structure). The external static SRAM can be 
expanded. 

SMS-transmission is implemented using a 1 28 bit DES encryption process which 
is based on a private-public key system. Encryption is implemented in software 
terms, that is to say no encryption IC is used. For safe operation, the system uses 
a watchdog circuit which at regular intervals checks the processor 5 and puts it 
into a secure status again if program execution is not taking place correctly. 

No further encryption is required on the way from the implant 1 to the external 
apparatus 2 because of the short range in addition to the implant-specific encoding 
of the data. 
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Mobile portion 3: Position-finding 

It is provided for the mobile radio device 7 that the field strength information with 
the associated numbers of the current and adjoined cells and the bit error rate is 
transmitted by way of SMS. On the basis of that position-finding information it is 
possible to locate the mobile portion 3 in emergency situations in which the patient 
is incapacitated. 

Mobile portion 3: Call number management 

The mobile radio device 7 includes a mobile radio module 7.1 and a memory in the 
form of a SIM(Subscriber Identity Module)-card 7.2. The SIM-card reader can be 
soldered directly into the circuit board under the mobile radio module 7.1. The 
SIM-card 7.2 is thus not accessible to the user. A SIM-card reader is provided in 
any case in embodiments which are based on the use of a mobile telephone. 

The call number or numbers of the service center is or are permanently stored in 
the memory of the SIM-card 7.2 by the mobile radio module 7.1. The mobile 
portion 3 is supplied with a SIM-card which contains the call number of a service 
center in the call number memory as a preset parameter. The call numbers on the 
SIM-card can be altered by way of SMS. Call number management (writing and 
reading the numbers on and from the SIM-card) must be implemented by the 
central control device 5 of the external apparatus. The preset call number is kept 
permanently on the SIM-card for the sake of safety on another memory location 
and is used if the external apparatus 2 cannot form a connection with a new call 
number. That ensures that establishing contact always remains possible. 

It is also possible to operate a plurality of service centers. The patient reports to 
any service center. In that way the address of the customer is known there and 
it is possible to decide which service center initially takes over the procedure. If 
the customer switches on his external apparatus, then it reports to the preset 
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service center insofar as it immediately sends an SMS-message thereto. Now, by 
sending back an SMS-message, the service center can transmit the call number 
which is to be used in future. The mobile portion 3 can thus be automatically 
associated at any time with another service center without a service engineer 
having to convert the mobile portion 3. That makes particular sense when it is 
possible thereby to avoid having to send SMS-messages over frontiers. 

The databases of the service centers are the same as each other so that it is 
always clear which implant 1 or mobile portion 3 is being operated by which 
service center. Suitable fields are to be provided in the database. 

In operation it is possible in each case to pick up only one further (second) number. 
That is used if the contact with the "new" service center can be successfully 
achieved. If that is not the case, the "old" call number is used again. If the 
external apparatus is again referred to a further service center, the second number 
is overwritten so that the operating procedure involved is always such that firstly 
the second number is tried and, in the event of one or more abortive attempts, the 
first number is used. The advantage of this procedure is that it is possible to 
achieve full flexibility but the secure call number remains stored so that a complete 
collapse of the connection is reliably avoided. 

A kind of LIFO-memory can also be organized in the SIM-card, for a maximum 
memory depth (for example ten call numbers). If the previously operative service 
center presets a new call number, that is used as the most up-to-date call number. 
If however transmission problems occur with that new call number, then in each 
case the next older call number is used until finally the permanently stored preset 
call number is next. If the memory is occupied, for example with 9 call numbers 
and the preset call number, then the oldest, that is to say the call number which 
is closest to the preset number is erased. The advantage of this procedure is its 
high level of redundancy as it is to be assumed that a connection occurs with at 
least one of the stored service centers. The disadvantage is that under some 
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circumstances many service centers receive data from an external apparatus, 
which only then can be combined together and evaluated jointly. 

As the external apparatus 2 is equipped with a modem 1 2 the call number memory 
in the SIM-card can additionally also be used for those call numbers. The organiza- 
tion can be implemented based on management of the mobile radio numbers. By 
virtue of the call numbers being stored on the SIM-card, in the event of replace- 
ment of the external apparatus on the part of the customer, for example in the 
event of a defect, the SIM-card can be fitted into the new apparatus again so that 
the mode of making the connection to the service centers is implemented without 
any gap or interruption. 



Rase station 4 



The base station 4 comprises a charging device 1 1 for the batteries in the power 
supply portion 1 0 and a modem 1 2, acting as a data transmission device, for the 
fixed-line telecommunication network 1 3 which is addressed by the mobile portion 
3 by way of the interface device 14. The base station 4 further includes an 
additional antenna 1 5 which upon connection to the mobile portion 3 is connected 
to the mobile radio device 7 and thus improves the transmission quality. 

The charging device 1 1 serves to charge up the Li-ion batteries of the mobile 
portion 3 and at the same time serves for the power supply for the components of 
the base station 4. The charging device is equipped with a regulator which is 
suitable for Li-ion batteries, and a monitoring circuit. It is designed for a maximum 
charging current of 350mA. It is dimensionally designed, and can be switched 
over, for a primary ac voltage of 220/1 10V, 50/60Hz, in which respect a range of 
100 to 240 V for the primary ac voltage and a frequency range of 47-63 Hz is 
preferred. Protection class 2 is used for the external apparatus 2. The power 
supply in the base station 4 can also be replaced by a suitable plug mains unit. 
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The interface device 14 is in the form of an infrared interface (IrDA). 

The additional antenna 1 5 is in the form of a diversity antenna. The arrangement 
is provided in each case with suitable ^/4-antennae which are in the form of loop 

or helix antennae. 

There is no mains switch. If the base station 4 is to be disconnected from the 
mains network, the plug mains unit can be pulled out. 

FvtP.rnal annara t' ■« ?■ ro-oneratio n of the mob ile portion 3 and the base station 4 

The mobile portion 3 is inserted into the base station 4 for the purposes of char- 
ging and for data transmission by way of the fixed-line telecommunication network 
13. 

The base station 4 is equipped with a light-emitting diode which lights up when the 
mobile portion 3 is plugged in and a charging current is charging the batteries. The 
light-emitting diode goes out when the mobile portion 3 is removed or current is no 
longer being taken by the mobile portion 3. The display of the light-emitting diode 
is inverted for the duration of the transmission, but at least one second, when a 
message is sent or received by way of the installed modem 1 2. The base station 
4 acknowledges insertion of the mobile portion 3 or removal of the mobile portion 
3, by a brief sound from a buzzer. 

The mobile portion 3 is fully operational during charging in the base station 4. The 
voltage transformers in the base station 4 are designed for up to 40 V so that a 
connection for charging from a motor vehicle system is possible. The control 
device 5 monitors the battery voltage and the supply of voltage at the mobile radio 
module 7.1. When the mobile portion 3 is switched on the batteries are fully 
charged again after about 4 hours in the base station 4. 
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For the purposes of data transmission the control device 5 is designed in such a 
way that it is only after a predetermined number of unsuccessful transmission 
attempts by way of the mobile radio device 7 that the transmission of data to the 
monitoring device is effected by way of the fixed-line telecommunication network 
13 by means of the interface devices 8 and 14 and the modem 12. If therefore 
the mobile radio transmission is not operating or the external apparatus 2 is being 
operated in a country which does not support a mobile radio standard, that is to 
say in the mobile portion 3 there are data which could be put into intermediate 
storage in the memory of the SIM-card 7.2 and which could not be transmitted by 
way of the mobile radio network to the service center, then transmission is effec- 
ted by way of the modem as soon as the mobile portion is plugged into the base 
station. 

The IR-interface 8 of the mobile portion 3 and the IR-interface 14 of the base 
station 4 are continuously ready to receive. The mobile portion 3 exchanges data 
with the base station 4 as soon as it is docked thereinto. That means that it is 
known to the mobile portion 3 in each case whether there is an operational modem 
12 in the base station 4. 

As the messages to be transmitted involve very short data blocks, a transmission 
speed of 9600 bauds is sufficient. The modem 1 2 is either integrated in the base 
station 4 or if necessary it can be connected by the service engineer by being 
simply fitted by snapping engagement into the base station 4. The modem 1 2 can 
be switched over to a software handshake as it is only that kind of "optical 2-wire 
transmission" that is supported by way of the IrDA interfaces 8 and 14. 

External apparatus 2: Self-test 

If an error is detected in operation, a corresponding inquiry from the service center 
is received or if the external apparatus 2 goes on the network again after a power- 
on reset, the external apparatus 2 executes a self-test and signals the result to the 
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service center. The external apparatus 2 therefore automatically signals errors and 
faults, it can be checked from the service center, and it signals back again when 
it is again ready for operation (for example after re-charging of the discharged 
batteries). The SMS-string with the result of the self-test is only transmitted if the 
foregoing three preconditions require this, no information relating to the self-test is 
contained in the normal transmission string. 

The purpose of the self-test is to permit conclusions to be drawn about the opera- 
tion of the hardware. A decision can then be taken in the service center how 
those faults and errors have to be handled. The external apparatus 2 signals in six 
cases immediately by way of SMS-messages or alternatively by way of a modem: 

A dangerous state is being signaled by the pacemaker. 

The transmission section to the pacemaker is not operable. 

A self-test of the external apparatus signals a fault or error. 

Upon signaling of a low battery state prior to power-off. 

In the case of a patient alarm, that is to say the patient triggers an alarm by 

pressing a key of the interface 9. 

On demand by the service center. 

The following criteria can be adopted as the options in terms of self-diagnosis of 
the external apparatus: 

a) The check sum by way of the program code (flash-ROM, EEPROM, ROM- 
error, program incorrectly loaded) gave a memory error. 

b) A memory test in respect of the RAM gave a memory error. 

c) Temporary failure of the mobile radio network has occurred (can also 
indicate hardware faults; reading out the mobile radio device 7 can clarify 
matters here). 

d) A time-out in communication with the service center has occurred (as c)). 

e) A received data string is too short or a check sum error has occurred 
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(hardware fault in the telemetry or reception disturbance or range pro- 
blems). 

Fvtfirnal apparatus 2: Ti ™p synchronization 

Only relative time is available for the microprocessors in external apparatuses, with 
the real-time clock thereof. The time in the implant 1 is not adjusted and after half 
a year is accurate to +/- 0.5 hours so that it cannot be used to establish the 
system time of the external apparatus 2. If in the mobile portion 3 the battery is 
discharged or removed by the service engineer, it can happen that the real-time 
clock totally loses the time. The external apparatus however requires the current 
time for specifying same in connection with data which are sent to the service 
center in order to document when events were received from the implant 1 . 

The data are sent in the form of SMS-messages, and received messages are 
acknowledged by the service center by way of SMS-messages, in relation to the 
external apparatus 2. In order to set the current time in the external apparatus 2, 
that is to say to implement time synchronization of the external apparatus 2, the 
time signature (SMS-header) of the acknowledgment SMS which contains data and 
clock time is used. 

If that acknowledgment SMS comes back within for example one minute, the 
external apparatus 2 can set the absolute time in accordance with the header of 
the acknowledgment, as it is guaranteed that both SMS were on the way for less 
than a minute. If a longer time has elapsed between the sent SMS and the ack- 
nowledgment, the SMS-header of the acknowledgment cannot be evaluated as it 
is not possible to establish whether the original transmission or the ack- 
nowledgment was delayed in transmission. Experience has shown that the time 
for an SMS-transmission is in the range of below 1 0 seconds so that the foregoing 
procedure can be well applied. 

As there is a very high probability that, after a power-on reset, the clock time in 
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the external apparatus 2 is wrong, immediate time synchronization is provided for 
that situation. When the external apparatus 2 connects to the network again after 
a power-on reset, it signals that to the service center straightaway by way of SMS. 
The clock of the externa, apparatus can then be immediately set with the SMS- 
acknowledgment from the service center. 

It is possible to establish that both the service center and also the external appara- 
tus 2 are operated with UTC-time. That means that the entire system operates on 
one time. Local time such as for examp.e GET or CEST then has to be ascertained 
from UTC-time when producing doctors' letters. 

If problems shou.d arise when ascertaining the absolute time, time transmission by 
way of the modem 1 2 can still be used as an alternative. Such a service is gene- 
rally made available by various providers for the public telephone network. 

Fxternal apparatus 2: ^rvinB interface 

By way of the interface device 1 6 for example a service engineer can communicate 
with the mobile portion 3 using for example a laptop. Another possibility « that 
the externa, apparatus operates as a data logger insofar as data (for examp.e as a 
blood sugar monitor) are read in, which are then a.so sent to the service center by 
way of SMS. 

The range of the interface device 1 6 is at least 0.4m. It is arranged in such a way 
that it can be used by an apparatus which is beside the external apparatus 2, when 
the mobi.e portion 3 is docked into the base station 4. It operates bidirectional^ 
and can transmit data in the half duplex mode. The transmission speed of the th.rd 
interface device 16 is at least 9600 bauds and can then be stepped up to 1 15 
Kbauds. 



The 



third interface device 1 6 is to be arranged in such a way that the communica- 
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tion between the base station 4 and the mobile portion 3 operates reliably, that is 
to say, there is no possibility of influence on the second interface device 8 by the 

third interface device 16. 

Figure 2 shows a flow chart of a data transmission method which can be used in 
conjunction with the method according to the invention and which can be used for 
data transmission between the implant 1 and the external apparatus 2. 

The triggering signal for data transmission is in this case always emitted by the 
transmitter/receiver unit of the implant 1 , for which purpose the transmitter/rece.- 

ver unit is switched on in a step 1 8. 

In step 1 9 transmission of the first data is then effected from the implant 1 to the 
external apparatus 2. A string which comprises 17 bytes is transmitted. These 
are 1 byte synchronization, 4 bytes identification, 1 byte serial number of the 
transmission, 1 byte length of the string being transmitted, 8 bytes data, and 2 
bytes security (CRC). In the case of asynchronous transmission there is an overhe- 
ad of three bits per byte so that 17*1 1 bits = 187 bits have to be transmitted. 

Thereupon step 20 involves plausibility checking of the first data transmitted, by 
the externa, apparatus. In that case for example a check is effected in respect of 
the CRC-bits, in relation to the transmitted string, or a check to ascertain whether 
the synchronization bits have the previously known values. It is also possible to 
check whether the string length coincides with the sent string length and/or 
whether the serial number of the transmission is correct. There is no checking of 
flags as no handling of the flags takes place in the external apparatus 2. In the 
event of expansions of the telemetry, the same type of an external apparatus can 
thus always be used. There is no checking of the implant number as the external 
apparatus can pass on the information of a plurality of implants. 



If the 



external apparatus in step 20 detects that the data are not plausible, step 22 
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involves establishing whether a predetermined number of renewed transmission 
attempts was exceeded. 

If it is established in step 22 that the predetermined number of renewed trans- 
mission attempts was not exceeded, then in step 23 valid data are again requested 
from the pacemaker. That request can comprise synchronization (8 bits), identifi- 
cation (32 bits), the serial number of the message (8 bits) and an agreed code (8 
bits). That string can also be safeguarded with an CRC-byte. 64 bits + 8 3 bits 
= 88 bits are then sent in order to initiate a transmission inquiry in respect of the 
pacemaker. 

If in step 20 the external apparatus detects that the data are plausible, then in step 
21, after the plausibility check has been implemented, a first acknowledgment is 
sent to the implant 1 , the first acknowledgment containing a first item of control 
information for controlling the reception readiness of the first transmitter/receiver 
unit. If the data set was recognized as being valid, in this case with or in the first 
acknowledgment a check data set is sent, which is checked by the implant 1 . 
There are two possible options in this respect: 

As the safest method, the previously sent first data set is sent back completely to 
the implant 1 which then compares the sent data set to the received data set. 
Then 187 bits would be sent back again. 

Alternatively synchronization (8 bits), identification (32 bits), the serial number of 
the transmission (8 bits) and the CRC-bits (16 bits) are sent back for checking 
purposes to the implant 1 which then checks whether the sent string (identifica- 
tion, number of the transmission) and whether the received CRC-bits conform with 
the CRC-bits of the sent message. In that case 8 byes are then transmitted 
instead of 1 7 bytes as above, that is to say 64 bits + 8 3 bits = 88 bits (about 
half in relation to variant 1). 
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If in step 24 checking of the first acknowledgment in the implant gives a negative 
result, that is to say if the check data are not identical to the output data, then the 
first data set is sent again. The implant then tries it again after a fixed period of 
time. The external apparatus 2 informs the service center about the number of 
incorrectly transmitted data packets. 

If in step 24 checking of the first acknowledgment in the implant gives a positive 
result, the implant in step 25 sends a second acknowledgment to the external 
apparatus 2. That second acknowledgment can comprise synchronization (8 bits), 
identification (32 bits), the serial number of the message (8 bits) and an agreed 
code (8 bits). That string can also be safeguarded with an CRC-byte. 64 bits + 
8*3 bits = 88 bits are sent. 

In step 26 the implant 1 then stops all transmitting and receiving activities. 

In step 27 the passing of a given period of time is checked, after which a fresh 
data set is waiting in the implant to be sent. 

After receipt of the second acknowledgment the mobile portion 3 will pass to the 
service center the first data which have now been verified. The first data set is 
marked as valid and the service center knows that these data are, with a very high 
level of probability, correct. The external apparatus retains those first data until 
the implant supplies a fresh data set which is verified as being correct. 

If an error occurs upon reception of the second acknowledgment (for example 
different implant number or acknowledgment code is not right) the first data are 
nonetheless sent by SMS to the service center, but in addition the external appara- 
tus 2 signals that the second acknowledgment of the implant 1 could not be validly 
transmitted. 

In this case there is the possibility that the implant 1 , after dispatch of the second 
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acknowledgment, after the passing of a precisely fixed period of time, goes into 
the receive mode again. Upon a renewed inquiry the external apparatus 2 for 
example can again send the first acknowledgment consisting of 88 bits in order to 
request a new transmission. Immediately after it has checked that it is addressed 
the implant 1 can begin with the renewed transmission without the received data 
first having to be evaluated. In this case the second acknowledgment or the first 
data set can be sent again. The external apparatus 2 then has in duplicate either 
the first data set or the second acknowledgment and it can now decide whether 
the first data set can be assumed to be valid. 

The transmission/reception cycles can be repeated a plurality of times. For reasons 
of saving energy however it is necessary to ensure that the procedure is inter- 
rupted after a given number of transmissions in order not to unnecessarily disch- 
arge the energy storage means of the implant. The external apparatus should then 
nonetheless send the data to the service center, but the data must be marked as 
non-verified. The data are held in the external apparatus 2 until a fresh data set is 
sent by the implant. In addition the last valid data set should be kept in the 
external apparatus, which the service center can then interrogate. In the case of 
a plurality of implants which co-operate with the external apparatus 2, the respecti- 
vely last data sets of each implant are to be kept in the external apparatus 2. 

In the described variant of the method the receiver of the external apparatus 2 is 
ready at any time to receive data from the implant. 

The following point is to be noted in regard to other variants of the method: at 
regularly recurring or any moments in time, transmissions are sent from the implant 
1 to the external apparatus 2, which either contain data or which only indicate that 
the implant 1 is active and ready to receive. If more than one message is to be 
sent, they are sent in succession. Those transmissions are received by the exter- 
nal counterpart arrangement, analyzed and acknowledged. The acknowledgments 
are expected in a fixed time window after transmission so that the receiver in the 
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implant 1 only has to be active for a short time. Data can already be transmitted 
to the implant 1 in the acknowledgments. On the basis of the content and type of 
the acknowledgments, this indicates whether further data are waiting in the 
external apparatus 2 for transmission towards the implant 1. The ack- 
nowledgments are respectively analyzed by the implant 1 to ascertain whether the 
external apparatus 2 wishes to send further data and it will then automatically 
proceed in the protocol for the transmission of data in the opposite direction (as 
described above). That cycle can now be repeated as often as may be desired 
until all data have been transmitted in both directions and no apparatus would 
want to send further data. 

In a further variant, a reduction in energy consumption in the external apparatus 2 
is also achieved. As soon as a message has been received from the external 
apparatus 2, the implant and the external apparatus are synchronized by establis- 
hing time segments whereby periodic times are defined, in which the receiver of 
the external apparatus is active. The implant 1 may then also only transmit within 
those time segments, if it is to be received. The above-indicated handling in- 
structions are correspondingly modified so that the implant 1 can only send within 
the time segments and it can no longer send at just any times. 

That limitation does not apply for an existing communication (sequence of trans- 
missions and acknowledgments) so that the receiver in the external apparatus 2 
still remains active for some time after stopping an acknowledgment in order to be 
able to receive any consequential transmission that may follow from the implant 1 . 
The implant also must not stop a transmission in any time segment. If the external 
apparatus 2 is to keep contact with a plurality of implants, then specific time 
segments are managed for each implant involved, and those time segments as far 
as possible should not overlap in order to avoid interference in relation to simulta- 
neous transmission in respect of different implants. 

The time segments can be altered within the limits of the above-described normal 
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bidirectional communication both in terms of the duration of the active and also the 
passive phase as well as the time of synchronization. If no further transmissions 
are received from the implant over a given period of time, then the active time 
segment is increased in length stepwise at the expense of the passive time seg- 
ment in order to catch any drift divergence of synchronicity. In the extreme case 
the receiver in the external apparatus is continuously active. That is also the reset 
state when switching on. 

Figure 3 in the form of a flow chart shows which strategy can be adopted in the 
event of repetitions of transmissions by the implant 1 . Figure 3 shows in detail 
step 22 from Figure 2 with the input 22.1 and the outputs 22.2 and 22.3. 

Step 28 firstly involves checking whether a counter 2 has not yet exceeded a 
predetermined first value, in this case 2. In this respect the counter Z represents 
the number of transmission attempts executed. In step 1 8 it is set to zero and it 
is increased by 1 whenever step 19 is implemented. If the predetermined first 
value has not yet been exceeded, a new transmission is initiated immediately by 
way of the output 22.2. Firstly therefore the attempt is made a second time to 
send the transmission. 

If the predetermined first value has been exceeded, then in step 29 a timer is set 
to zero. 

Step 30 then involves checking whether the counter Z has not yet exceeded a 
predetermined second value, in this case 3. If the predetermined second value has 
not yet been exceeded, the system waits noticeably by virtue of the waiting loop 
31 , as a systematic error can be assumed to apply in terms of transmission. That 
can be for example a disturbing item which makes the transmission impossible for 
some time (for example a piece of electrical equipment which is not adequately 
interference-suppressed). After a waiting time of for example 5 minutes, a further 
transmission attempt is started- If this is also unsuccessful the cycle is continued 
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at step 28. 

Step 32 then involves checking whether the counter Z has not yet exceeded a 
predetermined third value, in this case 4. If the predetermined third value is not 
yet exceeded the system waits even longer through the waiting loop 33, for 
example 1 hour, and starts a last transmission attempt. If this is also unsuccess- 
ful, the cycle is continued at step 28 and thereafter left at 22.3. In that case 
therefore transmission is only implemented again when fresh data are ready for 
transmission in the pacemaker. 

Figure 4 shows a block circuit diagram of a variant of a patient monitoring system 
using the present invention. 

In this case data transmission takes place between the implant 1 and the external 
apparatus shown in Figure 1 , the implant 1 being worn by a patient 33. From the 
external apparatus 2, the read-out data are transmitted by way of a mobile radio 
section 34 of a mobile radio network to a mobile radio station 35 of the mobile 
radio network and from there sent also by way of a mobile radio section 36 or 
alternatively by way of a fixed-line network connection 37 to a service center 38 
which serves as a central storage arrangement and monitoring arrangement. In 
this case all data are sent in the form of SMS-messages and mutually acknowled- 
ged by way of SMS. 

The central storage unit 38 is provided with a fully automatic database. The 
medical data are automatically read by way of TCP/IP-connection into the database 
computer where they are respectively entered into the provided tables and table 
fields, in respect of moment in time, implant, patient, external apparatus and 
medical contact (doctor/clinic). 

Upon the attainment of a certain degree of filling of the database, the data are 
transferred from the computer onto external media (for example CD or tape). In 
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accordance with the medical guidelines for data security patient-related data are 
stored immediately (as far as may be possible) on external read only media (CD- 
ROM). Proper access to all externally safeguarded data is continuously possible by 
way of suitable references in the database. 

The access options to the data are regulated by complex rights allocation (for 
example reading, writing, modifying, erasing, etc.) for various user groups such as 
data managers, clinic or doctor. During operation of the database manual inter- 
ventions and inquiries by system operators and other clients (for example the 
doctor 40) are possible at any time. 

Priority-controlled triggers in the database and a coupled expert system make it 
possible to react specifically to medical facts and situations: the database genera- 
tes in accordance with predefined rules items of information for the doctor and the 
system operator and passes such information to the target apparatuses 39 by way 
of fax, e-mail and internal and external computer connections. The items of 
information which are outputted are kept for later collective inquiry in the databa- 
se. In that way the doctor can again request a summarizing or lost report in 
relation to the patient. He receives medical information in a few minutes even 
during examination and summarized information relating to the next after-care date. 
The transmission medium and the target addresses can in this case be configured 
independently of the triggering time and event. In that way the attending doctor 
40 can obtain information about the state of health of his patient 33, in a manner 
as is wanted by the doctor. 

In an emergency the patient 33 can thus also receive medical help more quickly 
than usual. That emergency situation is triggered both by objectively measured 
medical data and also by depressing a key on the mobile portion 3. He enjoys 
highest priority, in relation to the other events. 

In addition the database can also react separately to data transmissions which are 
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triggered by the patient, for example insofar as in this case also information is sent 
to the doctor and the system operator. In that way the subjective condition of the 
patient can be taken into account to a particular degree in the data acquisition 
procedure, and also incorporated into the diagnosis options. 

Figure 5 shows a block circuit diagram of a variant of a patient monitoring and 
after-care system using the present invention. 

In this case the patient 33 with the implant 1 and the external apparatus 2 for 
after-care investigation are disposed in the interrogation region 41 of an after-care 
arrangement. In this case, triggered by the triggering device which co-operates 
with the external apparatus upon entering the interrogation region 41 , interrogation 
of the first data from the implant 1 is automatically executed by the doctor 40 prior 
to the after-care examination. In this case transmission of the first data is effected 
by means of the long-range telemetry connection between the implant 1 and the 
external apparatus 2. 

The result of the interrogation passes in suitably processed form by way of the 
path described in relation to Figure 4 by way of the service center 38 to the target 
apparatus 39 from which it is outputted to the doctor 40 for his information. At 
the same time further patient-related data are also outputted from the database of 
the service center 38 so that the doctor 40 can form a comprehensive picture. 

The routine current investigation by the doctor is thus supplemented by an overall 
picture over the time since the last visit to the doctor. The doctor acquires a 
picture over a number of weeks or months, which is substantially more informative 
than the current examination. In this case, a good picture is formed of the lifestyle 
habits of the patient, whereas it is precisely the appointment with the doctor that 
can represent an exceptional situation from the usual lifestyle (travel to the clinic 
or to the doctor, going up stairs, stress in traffic etc.). 
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!n the actual examination the doctor (for example in carrying out stress tests) can 
also immediately request a report from the service center 38, which is then supp- 
lied after a few minutes. In that way parameter changes which were set by means 
of the programmer can be immediately checked and possibly also optimized. 
Further reports can be produced by virtue of storage in the database and further 
evaluation options by the expert system or by comparison with other cases, in 
that way, due to advances in medical knowledge, it is possible to recognize new 
correlations. They are then notified to the doctor in the next report, without the 
doctor having to check each of his patients for possible effects and consequences, 
when fresh knowledge comes to light. 

In a further variant of the invention it is additionally possible, as soon as the 
patient 33 enters the interrogation region 41 of an after-care arrangement, to 
automatically start given standard test or diagnosis programs which are normally 
only carried out under medical supervision. It is possible for example to implement 
stimulus threshold, sensitivity, stress or defibrillation-shock tests. 

Figure 6 shows a variant of the invention from Figure 5 in which an external 
apparatus 2' is fixedly installed in the interrogation region 41 of the after-care 
arrangement. In this case the interrogation procedure is triggered as soon as the 
patient 33 with the implant 1 is in the interrogation range of the external apparatus 
2' for a certain period of time. 

The result of the interrogation procedure goes in suitably processed form directly 
from the external apparatus 2' to the target apparatus 39 from which it is output- 
ted to the doctor 40 for his information. At the same time further patient-related 
data are also acquired by way of the connection 43 from the database of the 
service center 38 and outputted at the target apparatus 39 so that in this case also 
the doctor 40 can have a comprehensive picture. 

Figure 7 shows a block circuit diagram of a telemetry device of an electromedical 
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implant which can be used together with the present invention. 

The telemetry device has a close-range transmitter 44, a telemetry unit 45 connec- 
ted thereto and an antenna interface device 46 which is connected to the teleme- 
try unit 45 and by way of which a close-range antenna 47 is connected to the 
close-range transmitter/receiver unit. 

In addition, to form a long-range telemetry device, the arrangement has a long- 
range transmitter 48 connected to the telemetry unit 45 and a long-range antenna 
48 connected to the antenna interface device 46. 

Furthermore the close-range telemetry device and the long-range telemetry device 
have separate energy storage means 51 and 52. 

The other necessary system components for a telemetry device such as inter- 
mediate storage means, operational control, encoding, decoding and driver with 
threshold detector are in this case integrated in the telemetry unit 45. 

For switching over between the long-range transmitter 48 and the close-range 
transmitter 44, they are connected to the telemetry unit 45 by way of a switching 
unit 46.1 . For switching over between the close-range antenna 47 and the long- 
range antenna 49, they are connected to the antenna interface device 46 by way 
of a further switching unit 46.2. It will be appreciated however that in other 
variants, the two transmitters, like also the two antennae, can also be disposed 
connected in parallel to the telemetry unit 45 and the antenna interface unit 46 as 
in general close-range and long-range telemetry are not operated simultaneously. 

To provide for adaptation of the modulation method for the respective telemetry 
involved, the arrangement has a matching logic unit 50 which is connected to the 
telemetry unit 45. The long-range telemetry device is operated at substantially the 
same effective data rate as the close-range telemetry device. 
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Figure 8 shows the transmitter/receiver unit of an embodiment of the implant 1 , in 
which separate energy storage means 56 and 57 are provided for the transmitter 
54 and the receiver 55. The energy storage means involve separate buffer capaci- 
tors 56 and 57. These capacitors 56 and 57 only have to be charged to the level 
of energy necessary for the respective procedure. The energy consumption of the 
one procedure does not influence the energy supply for the other procedure. The 
procedures can thus directly follow each other, which is advantageous in relation 
to a bidirectional communication protocol without charging of a single buffer 
capacitor to double the energy content being necessary for that purpose. 

Figure 9 shows a circuit diagram of a transmitter according to the invention of the 
first transmitter/receiver unit of a variant of the implant from Figure 1 . 

In this case a stable, frequency-moduiatable transmitter has been embodied by 
means of two bipolar transistors 58, 59, wherein the first transistor 58 in a Col- 
pttts or Clapp circuit with an SAW-resonator 60 forms an SAW-stabilized oscillator, 
and the second transistor 59 serves as a buffer stage and antenna driver. The 
transistors 58, 59 are designed for maximum gain at lowest collector current. The 
frequency can be modulated by a capacitance diode 61 in series with the SAW- 
resonator 60. The frequency variation and thus the data rate and/or the range of 
the transmitter can however be increased the capacitance diode being replaced by 
a PIN-diode which is switched by a further transistor. 

Th e antenna used can be a simple wire loop or an open wire (throw-out antenna) 
in the contour of the header of the implant. Overall in this case at 400 MHz a 
current consumption of less than 1mA is possible, at a range of several meters. 
The circuit can be supplied directly from a buffer capacitor fed by a high-resistance 
battery of the implant 1 , or from a low-resistance battery. There is no need for a 
charge pump. 

Figure 1 0 shows a further embodiment of an apparatus according to the invention 
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which substantially corresponds to that shown in Figure 1 , for which reason 
reference will only be made here to the differences involved. 

This arrangement involves an external apparatus 2" which is suitable for monito- 
ring, actuating and transmitting data from various electronic apparatuses 1 '. Uses 
can be the remote monitoring of installations, for example the degree of filling of 
automatic drinks dispensers or automatic vending machines, a link with domestic 
technology, for example the control and monitoring of the air conditioning instal- 
lation or the heating system, coupling to alarm installations or glass breakage 
signaling installations, for example burglary signaling by way of mobile radio, 
coupling to measurement systems, for example weather stations and level mete- 
ring units on rivers, coupling to systems for traffic observation and control, for 
example traffic signs, bridges etc. It can also be used as a bugging system or as 
a mobile telephone with special digital functions. 

The differences in relation to the structure shown in Figure 1 essentially concern 
the mobile portion 3' of the external apparatus 2". In this case the first interface 
device includes four potential-free inputs 6.1 by way of optocouplers and four 
potential-free outputs 6.2. By virtue of the potential separation of the inputs and 
outputs 6.1 and 6.2, the external apparatus 2" is suitable for monitoring and 
controlling digital states. 

In addition the receiving and transmitting portion 6 of Figure 1 is not included here, 
instead the serial interface 63 (RS 232) which is thus liberated is taken out by way 
of a 9-pole plug. In the case of the RS 232 a software handshake with three lines 
(RXD, TXD, GND) is sufficient. That means that the transmission rate is also 
limited to 9600 bauds. The serial interface 63 is not designed to be potential-free. 
By way of a further plug 64 the connections of the mobile radio module 7.1 can be 
taken to a microphone, a loudspeaker and optionally a buzzer (6 lines) so that for 
further areas of use it is possible to add a listening/speech combination and a 
buzzer. 
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The inputs 6.1 are in the range 1 at between -3V and 1 .5V L-level, between 3.5 
and 8V H-leve! and 1 0 m A input current; while in the range 2 they are at between 
-3V and 8V L-level, between 1 8V and 30V H-level and 1 0 mA input current. State 
recognition is implemented by way of an LED-display at a maximum switching 
frequency of 100 Hz rectangular and a separation voltage of 2.5 kV. 

The outputs have between 1 5 and 30V DC separate voltage feed, a load current 
of 200 mA, short-circuit protection, protection from thermal overloading and a 
separation voltage of 2.5 kV. Potential separation is effected by way of opto- 
couplers and the power switching function by way of MOS-FETs. 

A difference in relation to the structure shown in Figure 1 , in respect of the base 
station 4', only arises in regard to the power supply by the plug mains unit 11', 
instead of the mains unit in the base station. A further possible configuration 
provides that the base station is omitted and the external apparatus is supplied 
directly by way of a mains unit. In the event of mains failure the mobile portion 
then still continues to operate for about 20 hours. 

The invention is not limited in terms of implementation thereof to the preferred 
embodiments set forth hereinbefore. On the contrary a large number of alternative 
configurations are possible, which make use of the illustrated structure even in 
configurations of a basically different kind. 
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CLAIMS 



A method of data transmission between an electromedical implant (1) 
having a first transmitter/receiver unit, in particular an implant for cardiologi- 
cal uses, and an associated external apparatus (2) having a second trans- 
mitter/receiver unit (6), in which data transmission begins with a triggering 
signal which is sent by the one transmitter/receiver unit to the other trans- 
mitter/receiver unit and which in normal operation of the implant (1 ) is sent 
in predeterminable first time intervals, characterized in that the triggering 
signal is always emitted by the first transmitter/receiver unit, wherein at 
least the reception readiness of the first transmitter/receiver unit is maintai- 
ned after emission of the triggering signal for a second time interval. 

A method as set forth in claim 1 characterized in that at least the receiving 
portion of the first transmitter/receiver unit is switched off after termination 
of the second time interval during a rest phase which extends until the next 
triggering signal. 

A method as set forth in claim 1 or claim 2 characterized in that the second 
time interval is shorter than the first time interval. 

A method as set forth in one of the preceding claims characterized in that 
the triggering signal is formed by or includes a first data set which is to be 
transmitted. 

A method as set forth in one of the preceding claims characterized in that 
emission of the triggering signal is caused manually, in particular by the 
wearer of the implant. 

A method as set forth in one of the preceding claims characterized in that 
in response to a transmission of data by the first transmitter/receiver unit 
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the second transmitter/receiver unit (6) sends a first acknowledgment to the 
first transmitter/receiver unit, wherein the first acknowledgment includes at 
least one first item of control information for controlling the reception 
readiness of the first transmitter/receiver unit. 

7. A method as set forth in claim 6 characterized in that the first ack- 
nowledgment is formed by or includes a second data set which is to be 
transmitted. 

8. A method as set forth in one of the preceding claims characterized in that 
the external apparatus (2) implements a first plausibility check in respect of 
the data transmitted by the first transmitter/receiver unit and in dependence 
on the plausibility of the transmitted data the first acknowledgment includes 
a second item of control information for control of the first transmitter/recei- 
ver unit, wherein in the event of lack of plausibility of the transmitted data 
the second control information includes a first control signal for triggering 
a renewed transmission of data by the first transmitter/receiver unit. 

9. A method as set forth in claim 8 characterized in that the first transmitter/- 
receiver unit in response to the first control signal implements a renewed 
transmission of data only if a number of renewed transmissions, which is 
sufficiently low to avoid overloading of the power supply of the implant (1 ) 

is not exceeded. 

10. A method as set forth in claim 8 or claim 9 characterized in that for chec- 
king the transmission of the data by the implant (1 ) in the case of plausibili- 
ty of the transmitted data the second transmitter/receiver unit (6) sends at 
least a part of the transmitted data to the first transmitter/receiver unit. 

11. A method as set forth in claim 1 0 characterized in that after checking of the 
transmission of the data by way of the first transmitter/receiver unit the 
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implant (1) sends a second acknowledgment to the second transmitter/- 
receiver unit (2), wherein when successful transmission of the data is 
established the second acknowledgment includes a first signature represen- 
ting validity of the transmission and the implant (1 ) closes down at least the 
reception readiness of the first transmitter/receiver unit. 

12. A method as set forth in claim 1 1 characterized in that the external appara- 
tus (2) implements a second plausibility check in respect of the second 
acknowledgment and when lack of plausibility of the second ack- 
nowledgment is established after expiry of a further time interval after 
dispatch of the second acknowledgment implements an interrogation of the 
implant (1 ), wherein after the expiry of the further time interval the implant 
(1) assumes reception and transmission readiness of the first transmitter/- 
receiver unit for a renewed further time interval which is sufficient to 
receive and answer an inquiry from the external apparatus (2), and wherein 
the answer to the inquiry is effected by renewed sending of the second 
acknowledgment and/or the data which were sent last. 

13. A method as set forth in one of the preceding claims characterized in that 
when defective transmission of data is established a renewed transmission 
of data is effected by the first transmitter/receiver unit if a number of 
renewed transmissions, which is sufficiently low to avoid overloading of the 
energy supply of the implant (1), is not exceeded. 

14. A method as set forth in one of the preceding claims characterized in that 
renewed transmission is effected after expiry of a waiting time interval, 
wherein in the case of multiple renewed transmission the length of the 
waiting time interval preferably increases. 

1 5. A method as set forth in one of the preceding claims characterized in that 
after renewed transmission of data by the first transmitter/receiver unit the 
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method steps are executed again beginning with the plausibility check. 

16. A method as set forth in one of the preceding claims characterized in that 
the second transmitter/receiver unit (6) is substantially permanently ready 
to receive in the initial condition up to the first data exchange with the 
implant (1) and at least during the first data exchange reduces the trans- 
mission or reception readiness of the second transmitter/receiver unit (6) to 
a periodic transmission or reception readiness interval, wherein the second 
transmitter/receiver unit (6) is synchronized with the first transmitter/recei- 
ver unit in such a way that the transmission or reception readiness intervals 
of the first and second transmitter/receiver units overlap. 

17. A method as set forth in claim 1 6 characterized in that in the event of non- 
receipt of transmissions of the first transmitter/receiver unit at the second 
transmitter/receiver unit (6) over a predetermined number of transmission or 
reception readiness intervals of the second transmitter/receiver unit (6) the 
transmission or reception readiness interval of the second transmitter/recei- 
ver unit (6) is prolonged to catch a divergence drift of synchronicity. 

18. A method as set forth in one of the preceding claims characterized in that 
at least the first time interval is variable during operation by sending a 
second item of control information by the second transmitter/receiver unit 
(6) to the first transmitter/receiver unit which is ready to receive. 

19. A method as set forth in one of the preceding claims characterized in that 
the first time interval is varied in dependence on the operating parameters 
of the implant (1 h 

20. A method as set forth in one of the preceding claims characterized in that 
when appropriate operating parameters of the implant (1) apply the first 
transmitter/receiver unit emits an emergency triggering signal to the second 
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transmitter/receiver unit (6) for triggering an alarm signal. 




2yf An apparatus for data transmission between an electromedical implant (1 ) 
having a first transmitter/receiver unit, in particular an implant for cardiologi- 
cal uses, and an associated external apparatus (2) having a second trans- 
mitter/receiver unit (6), in which data transmission begins with a triggering 
signal which is sent by the one transmitter/receiver unit to the other trans- 
mitter/receiver unit in normal operation of the implant (1 ) in predeterminable 
first time intervals, characterized in that the triggering signal is always 
emitted by the first transmitter/receiver unit, wherein at least the reception 
readiness of the first transmitter/receiver unit is maintained after emission 
of the triggering signal for a second time interval. 



22. Apparatus as set forth in claim 21 characterized in that at least the recei- 
ving portion of the first transmitter/receiver unit remains switched off after 
termination of the second time interval during a rest phase which extends 
up to the next triggering signal. 
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Abstract 



A method of data transmission between an electromedical implant (1 ) having a first 
transmitter/receiver unit, in particular an implant for cardiological uses, and an 
associated external apparatus (2) having a second transmitter/receiver unit (6), in 
which data transmission begins with a triggering signal which is sent by the one 
transmitter/receiver unit to the other transmitter/receiver unit and which in normal 
operation of the implant (1 ) is sent in predeterminable first time intervals, wherein 
the triggering signal is always emitted by the first transmitter/receiver unit, and 
wherein at least the reception readiness of the first transmitter/receiver unit is 
maintained after emission of the triggering signal for a second time interval which 
is shorter than the first time interval. 
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